Microsoft Identity and Access Administrator — Question 44

You have an Azure subscription that contains a user named User1 and two resource groups named RG1 and RG2.

You need to ensure that User1 can perform the following tasks:

• View all resources.
• Restart virtual machines.
• Create virtual machines in RG1 only.
• Create storage accounts in RG1 only.

What is the minimum number of role-based access control (RBAC) role assignments required?

Answer options

• A. 1
• B. 2
• C. 3
• D. 4

Correct answer: C

Explanation

User1 needs a role to view all resources, which typically requires a built-in role like Reader. To restart virtual machines, a role such as Virtual Machine Contributor is necessary. Additionally, specific roles for creating virtual machines and storage accounts in RG1 are required, leading to a total of three distinct role assignments. The other options do not provide sufficient roles to meet all the requirements.